On Fri, 29 Oct 2004, L E O N wrote:
Yes, but the problem is that an entry with "garbage" is created. Then when I try to use a program like SARG to generate a Report the program crashes. I was wondering if there is a way to avoid it.
filter out the invalid/failed login replies before you run SARG, and then generate a separate report on these if desired.
Filter out failed logins and save then in failed_login.log
awk '{if ($4 == "TCP_DENIED/407" && $8 != "-") print > failed_login.log; else print}'Just filter out failed logins
awk '{if ($4 != "TCP_DENIED/407" || $8 == "-") print }'Regards Henrik
